Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/e77dc95f-e1ac-376f-abf0-2835b5f67e45.roa
File:                     e77dc95f-e1ac-376f-abf0-2835b5f67e45.roa (raw, json)
Hash identifier:          Y1MQUOcjddHkn8JHOFgi/KOXz7Mn3dkaKBclVaE+EPI=
Subject key identifier:   B0:81:1D:14:1E:44:70:34:71:04:C4:B4:7F:0F:B2:43:66:45:FD:C2
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F4328584D773A81EF5F0AFFBB33BA3100
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/e77dc95f-e1ac-376f-abf0-2835b5f67e45.roa
Signing time:             Sat 11 Apr 2026 01:00:24 +0000
ROA not before:           Sat 11 Apr 2026 01:00:24 +0000
ROA not after:            Fri 10 Jul 2026 01:00:24 +0000
asID:                     58309
IP address blocks:        2001:470:427::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Apr 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:77:3a:81:ef:5f:0a:ff:bb:33:ba:31:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Apr 11 01:00:24 2026 GMT
            Not After : Jul 10 01:00:24 2026 GMT
        Subject: CN=aa6adbb1-ef7e-4bc9-8efb-8416676dc066
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:7b:44:9d:cd:47:a6:1e:b5:9b:51:a9:e3:96:
                    16:89:05:90:28:23:b4:6f:a9:67:2c:00:4d:ed:75:
                    0c:35:46:be:1f:c7:ac:45:57:8f:e8:84:2a:7b:79:
                    7c:19:4d:92:82:2d:6e:f7:80:e5:20:6a:f9:6f:91:
                    88:05:74:07:62:85:24:94:61:4f:43:37:12:7a:4b:
                    35:b7:ad:10:90:1d:01:2e:32:19:7a:f0:7e:0c:29:
                    47:d9:d3:da:20:e5:3e:f3:92:9b:20:c1:c8:66:ab:
                    5b:12:7b:06:ac:dd:dd:32:6a:42:42:1c:09:79:d9:
                    1f:7d:f4:02:29:2e:e4:1f:5a:df:d3:2d:9a:6f:05:
                    7a:71:d0:a2:41:a7:55:0d:4c:c9:a0:51:a2:94:66:
                    0b:f9:1a:08:d2:ae:d5:91:2b:67:ec:3b:be:54:3c:
                    1e:e3:14:0c:f9:00:27:53:eb:02:02:ba:20:17:85:
                    b1:a3:5f:c9:cb:2f:60:ca:6b:71:d5:97:0d:f7:f6:
                    38:b0:da:2e:f3:51:95:3f:5b:8c:59:77:7e:fb:4b:
                    fb:fc:af:17:ad:f4:5a:da:b7:d8:0a:bd:52:ad:ff:
                    04:10:a6:39:e6:1c:1e:02:fd:f3:44:f5:19:12:20:
                    82:2e:b1:a2:8b:0e:b5:40:15:bf:65:0b:43:72:2c:
                    b8:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:81:1D:14:1E:44:70:34:71:04:C4:B4:7F:0F:B2:43:66:45:FD:C2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/e77dc95f-e1ac-376f-abf0-2835b5f67e45.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:427::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5c:49:18:d2:8c:b5:a2:62:1b:59:3e:d3:55:bc:4a:2a:56:98:
         9d:5c:49:82:cb:e9:a7:97:32:61:a0:e7:c0:33:ba:43:da:c5:
         69:11:0e:34:cd:8c:cb:4d:9c:78:ff:6b:83:a1:66:88:f7:1c:
         32:37:3a:84:c7:5f:90:fa:e9:01:9f:cb:d1:ee:6e:14:91:75:
         14:57:0f:c6:6d:2d:ca:91:58:db:cd:09:cb:d3:d1:89:4a:ec:
         22:6f:4f:9a:25:44:5c:ad:b6:e2:0a:39:89:12:25:87:3b:42:
         0c:0b:6e:9c:5a:32:b2:46:9e:78:23:28:d1:c2:cd:72:ae:48:
         ea:64:63:d6:7a:3c:e1:11:55:fc:e8:6a:66:2f:79:c7:87:f8:
         ca:2d:ce:60:f8:87:06:ba:6c:4f:a7:db:b8:cd:e5:83:9b:3c:
         0a:74:75:fd:b0:00:26:fb:30:ba:e8:a0:f8:79:fa:d8:ce:ec:
         c9:21:44:9f:89:1c:04:d7:98:cc:89:e6:a7:85:b6:c5:ae:35:
         a2:f3:bd:5b:48:c6:4a:0a:5d:fd:c2:78:17:13:f7:81:ff:39:
         30:ee:f6:ea:73:34:b4:c9:0e:3b:f2:49:70:2b:bb:38:b9:b6:
         99:bb:89:ca:20:7c:70:b2:66:12:c2:b5:8a:88:f3:8e:05:ad:
         23:a5:3f:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 13:37:53 2026 by rpki-client